Embedded Security Engineer

Quick Facts

• Role: Embedded Security Engineer

Description

You will be responsible for firmware security across the product, covering secure boot, chain of trust, encrypted firmware, and key/certificate management. The role includes hardening embedded Linux to meet IEC 62443-4-2 SL1 requirements, secure OTA updates for the router and cellular module, and ongoing CVE monitoring with threat modeling and security code reviews. You will also collaborate on certification and coordinate penetration tests.

Responsibilities

• Secure Boot and chain of trust

• Encrypt firmware and manage cryptographic keys and certificates

• System hardening aligned with IEC 62443-4-2 (SL1), including read-only filesystem and intrusion detection

• Implement secure OTA updates for the router and cellular module

• Monitor and mitigate CVEs, perform threat modeling, and conduct security reviews of code

• Support certification efforts and coordinate penetration testing

Requirements

• Experience with security for embedded and/or Linux systems

• Practical cryptography experience: AES, RSA, TLS, signing, PKI

• Experience with secure boot / chain of trust and hardening

• C/C++ programming skills and understanding of CVE processes and security practices

• English proficiency for reading standards and communicating in an international team

Benefits

• Flexible working hours and possibility of home office

• Internal and external trainings and certifications

• 5 weeks of vacation, 3 sick days, sports and cultural events

• Company laptop and phone for private use, MultiSport card, workplace refreshments

• Contribution to pension savings, vaccination support, and additional benefits